FreeBSD

FreeBSD 12 — py27-notebook — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py27-notebook — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Jupyter notebook — open redirect vulnerability Related CVEs: CVE-2018-8768 CVE-2019-10255 Upstream summary: Jupyter blog: Login pages tend to take a parameter for redirecting back to a page after successful login, […]

Read more
FreeBSD 12 — portupgrade — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — portupgrade — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: portupgrade — insecure temporary file handling vulnerability Related CVEs: CVE-2005-0610 Upstream summary: Simon L. Nielsen discovered that portupgrade handles temporary files in an insecure manner. This could allow an unprivileged […]

Read more
FreeBSD 12 — php5-exif — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php5-exif — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2011-0708 CVE-2011-4566 CVE-2011-4885 Upstream summary: php development team reports: Security Enhancements and Fixes in PHP 5.3.9: Added max_input_vars directive to prevent attacks based on […]

Read more
FreeBSD 12 — iojs — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — iojs — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: node, iojs, and v8 — denial of service Related CVEs: CVE-2015-5380 Upstream summary: node reports: This release of Node.js fixes a bug that triggers an out-of-band write in V8's utf-8 […]

Read more
FreeBSD 12 — php5-soap — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php5-soap — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-6831 CVE-2015-6832 CVE-2015-6833 CVE-2015-6834 CVE-2015-6835 CVE-2015-6836 CVE-2015-6837 CVE-2015-6838 Upstream summary: PHP reports: Core: Fixed bug #70172 (Use After Free Vulnerability in unserialize()). Fixed bug […]

Read more
FreeBSD 12 — snmptt — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — snmptt — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: snmptt — malicious shell code Upstream summary: Snmptt reports: Fixed a security issue with EXEC / PREXEC / unknown_trap_exec that could allow malicious shell code to be executed. Fixed a […]

Read more
FreeBSD 12 — zh-wordpress — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zh-wordpress — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wordpress — multiple vulnerabilities Related CVEs: CVE-2007-4894 CVE-2007-5710 CVE-2008-4107 CVE-2008-5278 CVE-2014-9033 CVE-2014-9034 CVE-2014-9035 CVE-2014-9036  +3 more Upstream summary: MITRE reports: wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before […]

Read more
FreeBSD 12 — zsync — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zsync — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zlib — buffer overflow vulnerability Related CVEs: CVE-2005-2096 Upstream summary: Problem Description An error in the handling of corrupt compressed data streams can result in a buffer being overflowed. Impact […]

Read more
FreeBSD 12 — kibana — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — kibana — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kibana4 — XSS vulnerability Related CVEs: CVE-2015-8131 Upstream summary: Elastic reports: Fixes XSS vulnerability (CVE pending) – Thanks to Vladimir Ivanov for responsibly reporting. Table of contents Symptom & Impact […]

Read more
CHAT